oXya continues with its ISAE 3402 and SSAE 16 Certification process

oXya complies with the new international and U.S. standards

oXya has been certified since 2009. Once again, oXya was certified SSAE16 compliant in July 2012 and ISAE 3402 compliant in September 2012.

Deloitte validated and issued its ISAE 3402 report for France (International Standard on Assurance Engagements) type 2, following a six month audit period, from January to June 2012. The scope of the certification included the entire delivery processes, hosting, monitoring, operations, administration and governance over the two data centers and all oXya’s French offices.

In July 2012, the SSAE16 certification (Statement on Standards for Attestation Engagements No. 16) Type II for oXya Corp. based in the United States was validated by ‘360 Advanced, PA’.

In 2013, the certification process continues and will also include the Benelux and the UK offices.

oXya offers its customers the guarantee of an independent certification process based on recognised international standards.

The new certifications

To support outsourcing activities, standards have to evolve in order to closely evaluate the risks to the customers when working with third party suppliers.

Since June 2011, the American SAS 70 standard has been replaced by the American standard SSAE 16 and the ISAE 3402 international standard. These new standards offer a broader range of controls aligning with the most up to date standards. The benefits include tools which will provide guidance on risk management as well as development and continuous improvement.

From a supplier perspective, compliance with the new standards can guarantee the implementation of relevant controls when it comes to hosting, managing systems and customer data.

The audits assess the existence and adequacy of controls put in place by the service provider in order to deliver services based on best practices recognised by the market and put forward by the ITGI (Information Technology Governance Institute). These audits then evaluate the effective implementation of these controls within the oXya internal processes and also its customers over a period covering the last 6 months.

Guarantees to customers

"These certifications, recognised internationally for ISAE 3402 and for SSAE16 in the U.S. market, offer a new guarantee on the quality of service procedures and controls implemented within oXya for all our customers, including internationally." says Frederic de Belloy, President of oXya.